Avaya Configuring IPsec Services Instrukcja Użytkownika Pobierz pdf (Strona 90)

Configuring IPsec Services

C-6

308630-14.00 Rev 00

Example 2: Required Policies on RTR2 to Protect Data Between

RTR1 Subnet 192.32.5.0 and RTR2 Subnet 192.28.41.0

RTR1 Interface S21

Security Policy

Outbound Inbound

Action

Bypass Bypass

Criteria

Protocol 89 (OSPFIGP) Protocol 89 (OSPFIGP)

RTR 2 Interface S21

Policy

Outbound

Action

Protect

Criteria

IP source address range: 192.28.41.0 - 192.28.41.255

IP destination address range: 192.32.5.0 - 192.32.5.255

Source: 1.1.1.2

Destination: 1.1.1.1 SPI 256

RTR2 Interface S21

Security Policy

Outbound Inbound

Action

Bypass Bypass

Criteria

Protocol 89 (OSPFIGP) Protocol 89 (OSPFIGP)

1 2 ... 85 86 87 88 89 90 91 92 93 94 95 ... 121 122

Configuring IPsec Services 1
Trademarks 2
Restricted Rights Legend 2
Statement of Conditions 2
Contents 7
308630-14.00 Rev 00 ix 9
308630-14.00 Rev 00 xi 11
308630-14.00 Rev 00 xiii 13
Before You Begin 15
Text Conventions 16
Acronyms 17
Hard-Copy Technical Manuals 19
How to Get Help 19
Chapter 1 21
Overview of IPsec 21
About IPsec 22
Note Regarding IPsec and NAT 22
Supported Routers 23
Supported WAN Protocols 23
IPsec Services 24
How IPsec Works 25
IPsec Tunnel Mode 26
IPsec Elements 27
Security Gateways 28
Security Policies 28
Security Associations 31
Security Protocols 35
Authentication Header 36
Perfect Forward Secrecy 37
Chapter 2 39
Installing IPsec 39
Upgrading Router Software 40
Installing the IPsec Software 40
308630-14.00 Rev 00 41
Securing Your Site 42
Securing Your Configuration 42
Random Number Generator (RNG) 43
Generating NPKs 43
Caution: 44
Changing an NPK 46
Monitoring NPKs 46
Chapter 3 47
Starting IPsec 47
Creating Policies 48
Specifying an Action 49
Policy Considerations 49
Creating an Outbound Policy 50
Creating an Inbound Policy 52
About Automated SA Creation 54
About Manual SA Creation 56
Chapter 4 59
Customizing IPsec 59
Editing a Policy 60
Adding a Policy 61
Frame Relay Protocol 62
Reordering Policies 64
Frame Relay 65
Manual SA Modifications 67
Disabling IPsec 69
Appendix A 71
Site Manager Parameters 71
Enabling IPsec Parameters 72
IPsec Policy Parameters 73
Appendix B 83
Definitions of k Commands 83
Appendix C 85
RTR4 Subnet 192.32.30.0 88
Manual SA Policy Examples 89
RTR1 and RTR2 92
RTR1 93
RTR2 93
RTR3 96
RTR4 96
Supported Versions 100
Configuring Through a Browser 100
Terminology 101
Configuration Specifics 102
Feature Comparison Summary 103
Troubleshooting Tips 104
Configuration Examples 105
Protocol Numbers 109
Appendix D 109

Komentarze do niniejszej Instrukcji

Brak uwag

Avaya Configuring IPsec Services Instrukcja Użytkownika Strona 90

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Oprogramowanie Avaya Configuring IPsec Services